Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add NovasPlace/CSM --skill agentbook-version-controlgit clone --depth 1 https://github.com/NovasPlace/CSMWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/novasplace/csm/agentbook-version-control)<a href="https://agentmods.dev/skills/novasplace/csm/agentbook-version-control"><img src="https://agentmods.dev/badge/skills/novasplace/csm/agentbook-version-control/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/novasplace/csm/agentbook-version-control"><img src="https://agentmods.dev/badge/skills/novasplace/csm/agentbook-version-control.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00065 | $0.00939 |
| Opus 5.5 | $0.00026 | $0.00376 |
| Sonnet 5.5 | $0.00013 | $0.00188 |
| Haiku 4.5 | $0.00006 | $0.00094 |
Grade A, and why
agentbook-version-control scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 97 lines — stays where its author put it; the contents beside it link to each section on GitHub.
AgentBook Version Control
Treat Git as the authority for files and AgentBook as the provenance layer for intent, evidence, decisions, tests, and recovery state. Never represent AgentBook as a replacement for Git.
Establish status
- Inspect the current workspace,
git status, and recent Git history before trusting recalled state. - Before the first CSM operation, call
csm_runtime_status. Stop and report a provider or project-root mismatch. - Read
csm_agentbook_state, recentcsm_agentbook_events,goal_list, andlist_checkpointsas needed. - Report status using five fields: workspace identity, active goal, latest checkpoint, verified evidence, and unresolved work.
Current files and test output outrank memory. Treat automatic event capture as a recovery log, not as a curated milestone.
Create a checkpoint
Create a checkpoint before an expensive, risky, or branching change and after a verified outcome. Include this information in the explicit message snapshot or milestone used to build it:
goal:
parent/baseline:
git commit:
dirty-tree status or diff hash:
change:
reason:
expected effect:
verification:
actual result:
decision: keep | revert | unresolved
known risks:
next action:
Use create_checkpoint for recoverable session state. Use bridge_sync_turn only for a durable
milestone that automatic hooks cannot infer. Do not create redundant checkpoints for routine reads.
Branch and compare work
- Use Git branches or worktrees for file isolation. Do not invent a second source-control system.
- Give each agent attempt one explicit goal, baseline Git identity, and checkpoint lineage note.
- Keep parallel attempts disjoint where possible. Never merge or delete a branch without the user's authorization.
- Compare attempts across code and agent state: file diff, decisions, evidence, tests, performance, cost, failures, and open risks.
- Apply only the selected artifacts through normal Git operations. Record why the result was kept, combined, or rejected.
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 97 lines · 65 tokens per session scan A 3faa1f8117d4
agentbook-version-control is a skill published in the GitHub repository NovasPlace/CSM (46 stars, last pushed 4d ago), licensed MIT. It adds 65 tokens to every session and 939 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
dark-memory
Use for governance, memory, drift detection, and audit trail via dark-memory-mcp. Covers 52 canonical + 3 red-team tools across 16 namespaces: session lifecycle, agentmemory CRUD+search, vibe-flow spec/artifact publish + drift, LLM-as-judge, delegation+mindset, research, observability, error observatory, governance…
vibe-loop-git
Skill "vibe-loop-git" from Opita-Code/dark-memory-mcp, covering vibe-loop-git — 13-loop vibe protocol for dark-memory, what this mod is, what this mod is not, when to load this skill and the 13-loop protocol (in dependency order).
opencode
Skill "opencode" from Opita-Code/dark-memory-mcp, covering vibe-loop-git — opencode adapter, opencode-specific invocation, quick start, start a session and invoke the mod.
claude-code
Skill "claude-code" from Opita-Code/dark-memory-mcp, covering vibe-loop-git — claude-code adapter, claude-code-specific invocation, mount the mod, via the claude-code skills add command) and quick start.
codex
OpenAI Codex is OpenAI's coding agent. It supports custom skills via the /.codex/skills/ directory.
ck
Persistent per-project memory for Claude Code. Auto-loads project context on session start, tracks sessions with git activity, and writes to native memory. Commands run deterministic Node.js scripts — behavior is consistent across model versions.